Securing an interconnected digital engineering and certification ecosystem
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for secure communications in a digital engineering ecosystem. In some implementations, a digital platform receives a request from a user device to interact with a digital model. The digital platform determines whether a user operating the user device is authorized. In response to determining the user is authorized to access the digital platform, the digital platform generates a token that provides the user with access to the digital platform. The digital platform determines whether the request includes malicious activity. In response to determining that the request is absent of the malicious activity, the digital platform executes a digital thread that executes one or more operations using digital tools and the digital model. The digital platform provides data indicative of the one or more operations executing the digital thread to the user device.
1. A computer-implemented method comprising:
receiving, from a user device and by a digital platform, a request to interact with a digital model;
determining whether a user operating the user device is authorized to access the digital platform;
in response to determining that the user is authorized to access the digital platform, generating a token that provides the user with access to the digital platform;
determining whether the request includes malicious activity;
in response to determining that the request is absent of the malicious activity, executing, using data from the request and the generated token enabling the user access to the digital platform, a digital thread that executes one or more operations using one or more digital tools and the digital model, wherein executing the digital thread comprises executing, across a multi-cellular environment, the one or more operations using the one or more digital tools on the digital model, each cell of the multi-cellular environment executing one or more of the one or more operations upon the digital model; and
providing data indicative of the one or more operations executing the digital thread to the user device for presenting on a user interface of the user device.
2. The computer-implemented method of claim 1 , wherein determining whether the request includes malicious activity comprises analyzing, using a permissions model, the request to detect a presence of the malicious activity.
3. The computer-implemented method of claim 2 , further comprising:
in response to determining that the request includes the malicious activity, preventing, by the permissions model, the request from accessing the digital platform; or
in response to determining that the request does not include the malicious activity, permitting, by the permissions model, the request to access the digital platform.
4. The computer-implemented method of claim 1 , wherein executing, using the data extracted from the request and the generated token enabling access to the digital platform, the digital thread that executes the one or more operations using the one or more digital tools and the digital model comprises: authenticating and authorizing, the request using the generated token; in response to authenticating the request using the generated token, extracting data from the request by a service mesh, wherein the extracted data comprises the one or more operations to be performed using the one or more digital tools upon the digital model; creating the digital thread using the extracted data from the request; and executing the digital thread upon the digital model.
5. The computer-implemented method of claim 1 , wherein executing, across the multi-cellular environment, the digital thread that executes the one or more operations using the one or more digital tools and the digital thread comprises: executing, by a first cell, a first operation of the one or more operations on the digital model; encrypting, by the first cell, a result of performing the first operation; providing, by the first cell, the encrypted result to a second cell; decrypting, by the second cell, the encrypted result; and executing, by the second cell, a second operation of the one or more operations on the digital model based on the decrypted results.
6. The computer-implemented method of claim 1 , wherein each cell of the multi-cellular environment comprises: one or more microservices and APIs for performing one or more operations on one or more digital models, and a splicer that enables each cell of the multi-cellular environment to communicate with one or more other cells.
7. The computer-implemented method of claim 1 , further comprising generating audit data that tracks movement of the request across each cell in the multi-cellular environment for executing the one or more operations.
8. The computer-implemented method of claim 1 , further comprising: monitoring an amount of network data transmitted between each cell in the multi-cellular environment; and throttling the amount of network data transmitted between each cell when the amount of network data satisfies a threshold value.
9. The computer-implemented method of claim 1 , further comprising: storing, by the digital platform, one or more digital engineering tools in a tools database, the one or more digital engineering tools comprise model-based systems engineering (MBSE) tools, augmented reality (AR) tools, computer aided design (CAD) tools, computational fluid dynamics (CFD) tools, finite element analysis (FEA) tools, electronic design automation (EDA) tools, data analytics tools, modeling and simulation (M&S) tools, product lifecycle management (PLM) tools; and storing one or more digital engineering models, the one or more digital engineering models comprise simulation engines, requirements models, electronics models, test-plan models, cost-models, schedule models, software modeling, supply-chain models, manufacturing models, cyber security models, multi-attribute trade-space tools, and mission effects models.
10. A system comprising: one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising: receiving, from a user device and by a digital platform, a request to interact with a digital model; determining whether a user operating the user device is authorized to access the digital platform; in response to determining that the user is authorized to access the digital platform, generating a token that provides the user with access to the digital platform; determining whether the request includes malicious activity; in response to determining that the request is absent of the malicious activity, executing, using data from the request and the generated token enabling the user access to the digital platform, a digital thread that executes one or more operations using one or more digital tools and the digital model, wherein executing the digital thread comprises executing, across a multi-cellular environment, the one or more operations using the one or more digital tools on the digital model, each cell of the multi-cellular environment executing one or more of the one or more operations upon the digital model; and providing data indicative of the one or more operations executing the digital thread to the user device for presenting on a user interface of the user device.
11. The system of claim 10 , wherein determining whether the request includes malicious activity comprises analyzing, using a permissions model, the request to detect a presence of the malicious activity.
12. The system of claim 11 , further comprising: in response to determining that the request includes the malicious activity, preventing, by the permissions model, the request from accessing the digital platform; or in response to determining that the request does not include the malicious activity, permitting, by the permissions model, the request to access the digital platform.
13. The system of claim 10 , wherein executing, using the data extracted from the request and the generated token enabling access to the digital platform, the digital thread that executes the one or more operations using the one or more digital tools and the digital model comprises: authenticating and authorizing, the request using the generated token; in response to authenticating the request using the generated token, extracting data from the request by a service mesh, wherein the extracted data comprises the one or more operations to be performed using the one or more digital tools upon the digital model; creating the digital thread using the extracted data from the request; and executing the digital thread upon the digital model.
14. The system of claim 10 , wherein executing, across the multi-cellular environment, the digital thread that executes the one or more operations using the one or more digital tools and the digital thread comprises: executing, by a first cell, a first operation of the one or more operations on the digital model; encrypting, by the first cell, a result of performing the first operation; providing, by the first cell, the encrypted result to a second cell; decrypting, by the second cell, the encrypted result; and executing, by the second cell, a second operation of the one or more operations on the digital model based on the decrypted results.
15. The system of claim 10 , wherein each cell of the multi-cellular environment comprises: one or more microservices and APIs for performing one or more operations on one or more digital models, and a splicer that enables each cell of the multi-cellular environment to communicate with one or more other cells.
16. The system of claim 10 , further comprising generating audit data that tracks movement of the request across each cell in the multi-cellular environment for executing the one or more operations.
17. The system of claim 10 , further comprising: monitoring an amount of network data transmitted between each cell in the multi-cellular environment; and throttling the amount of network data transmitted between each cell when the amount of network data satisfies a threshold value.
18. The system of claim 10 , further comprising: storing, by the digital platform, one or more digital engineering tools in a tools database, the one or more digital engineering tools comprise model-based systems engineering (MBSE) tools, augmented reality (AR) tools, computer aided design (CAD) tools, computational fluid dynamics (CFD) tools, finite element analysis (FEA) tools, electronic design automation (EDA) tools, data analytics tools, modeling and simulation (M&S) tools, product lifecycle management (PLM) tools; and storing one or more digital engineering models, the one or more digital engineering models comprise simulation engines, requirements models, electronics models, test-plan models, cost-models, schedule models, software modeling, supply-chain models, manufacturing models, cyber security models, multi-attribute trade-space tools, and mission effects models.
19. One or more non-transitory computer-readable media storing software comprising instructions that are operable, when executed by one or more computers, to cause the one or more computers to perform operations comprising: receiving, from a user device and by a digital platform, a request to interact with a digital model; determining whether a user operating the user device is authorized to access the digital platform; in response to determining the user is authorized to access the digital platform, generating a token that provides the user with access to the digital platform; determining whether the request includes malicious activity; in response to determining that the request is absent of the malicious activity, executing, using data from the request and the generated token enabling the user access to the digital platform, a digital thread that executes one or more operations using one or more digital tools and the digital model, wherein executing the digital thread comprises executing, across a multi-cellular environment, the one or more operations using the one or more digital tools on the digital model, each cell of the multi-cellular environment executing one or more of the one or more operations upon the digital model; and providing data indicative of the one or more operations executing the digital thread to the user device for presenting on a user interface of the user device.
20. The one or more non-transitory computer-readable media of claim 19 , wherein determining whether the request includes malicious activity comprises analyzing, using a permissions model, the request to detect a presence of the malicious activity.
21. The one or more non-transitory computer-readable media of claim 20 , further comprising: in response to determining that the request includes the malicious activity, preventing, by the permissions model, the request from accessing the digital platform; or in response to determining that the request does not include the malicious activity, permitting, by the permissions model, the request to access the digital platform.
22. The one or more non-transitory computer-readable media of claim 19 , wherein executing, using the data extracted from the request and the generated token enabling access to the digital platform, the digital thread that executes the one or more operations using the one or more digital tools and the digital model comprises: authenticating and authorizing, the request using the generated token; in response to authenticating the request using the generated token, extracting data from the request by a service mesh, wherein the extracted data comprises the one or more operations to be performed using the one or more digital tools upon the digital model; creating the digital thread using the extracted data from the request; and executing the digital thread upon the digital model.
23. The one or more non-transitory computer-readable media of claim 19 , wherein executing, across the multi-cellular environment, the digital thread that executes the one or more operations using the one or more digital tools and the digital thread comprises: executing, by a first cell, a first operation of the one or more operations on the digital model; encrypting, by the first cell, a result of performing the first operation; providing, by the first cell, the encrypted result to a second cell; decrypting, by the second cell, the encrypted result; and executing, by the second cell, a second operation of the one or more operations on the digital model based on the decrypted results.
24. The one or more non-transitory computer-readable media of claim 23 , further comprising generating audit data that tracks movement of the request across each cell in the multi-cellular environment for executing the one or more operations.
25. The one or more non-transitory computer-readable media of claim 19 , wherein each cell of the multi-cellular environment comprises: one or more microservices and APIs for performing one or more operations on one or more digital models, and a splicer that enables each cell of the multi-cellular environment to communicate with one or more other cells.